← All credits
WPScan
4602 vulnerability records and advisories credit this contributor.
CVE-2026-86798
HootBoard <= 3.1.4 - Unauthenticated Stored XSS via Board Configuration REST Endpoint
CVE-2026-87760
Web Vitals Tracking <= 5.4.2 - Unauthenticated Stored XSS via Tracking Beacon Metric Name
CVE-2026-87761
Adwised Web Push Notification <= 2.5.7 - Subscriber+ Stored XSS via Pop-up Settings
CVE-2026-87762
Adwised Web Push Notification <= 2.5.7 - Unauthenticated Stored XSS via Secret Key Type Juggling
CVE-2026-87764
BuddyPress Instant Chat <= 1.6 - Unauthenticated Stored XSS via Chat Message
CVE-2026-88785
Simple Membership < 4.8.3 - Newly Registered Member Password Disclosure via URL Query String
CVE-2026-88826
SmugMug Embed <= 3.13 - Unauthenticated Stored XSS via saveSelectedAlbums
CVE-2026-88827
Disable Users <= 1.0.5 - Disabled Account Authentication Bypass via XML-RPC and Application Passwords
CVE-2026-88903
Topcontent <= 1.2.1 - Unauthenticated Stored XSS via Content Webhook
CVE-2026-88905
KeyWord Collector <= 1.4 - Unauthenticated Stored XSS and Settings Update via WPKeyWordSettings